#3589 (ok 4.0.0) No table permissions displayed

3.5.3
fixed
Privileges (64)
1
2013-09-17
2012-05-06
No

I discovered an issue since version 3.5.0.

I have some users with granted table privilegs but PMA says "Table-specific privileges" "None" I have confirmed that the rights are in `mysql`.`tables_priv`. When I try to add the same rights with PMA it says the rights are already defined but no rights shown in the list.

Some system information

Database server
- Server: Localhost via UNIX socket
- Software: MySQL
- Software version: 5.5.22-log - MySQL Community Server (GPL)
- Protocol version: 10
- User: root@localhost
- Server charset: UTF-8 Unicode (utf8)

Web server
- nginx
- Database client version: libmysql - mysqlnd 5.0.10 - 20111026 - $Id: b0b3b15c693b7f6aeb3aa66b646fee339f175e39 $
- PHP extension: mysqli

Discussion

  • lopho

    lopho - 2012-05-16

    ill donate $20 to whomever fixes this within the next week (paypal only)

     
  • Naveen Nayak

    Naveen Nayak - 2012-05-30

    This is a very important issue from the database admin perspective -

    i scratched my head for 15 mins when no table privileges were shown for a user in phpmyadmin but the user was able to connect - then i went command prompt and issued SHOW GRANTS FOR 'user'@'host' and could see all privileges.

    Further digging shows that phpmyadmin will not display tables in the privileges page, however when you try to add table specific privileges, it detects and displays all the privileges

    please modify this behavior to display table specific privileges on the main privileges page

     
  • lopho

    lopho - 2012-07-26

    hm, maybe confirming this on apache as well will increase the probability of catching someones attention:

    Database server
    - Server: Localhost via UNIX socket
    - Software: MySQL
    - Software version: 5.1.63-0ubuntu0.10.04.1 - (Ubuntu)
    - Protocol version: 10
    - User: [nothingtoseehere]@localhost
    - Server charset: UTF-8 Unicode (utf8)

    Web server
    - Apache
    - Database client version: libmysql - 5.1.63
    - PHP extension: mysqli

    Apache version: Apache/2.2.14
    PHP version: 5.3.2-1ubuntu4.17 ( CGI/FastCGI [ it's fcgid actually ] )

    phpmyadmin version: 3.5.2.0

    running on a https://sub.sub.domain.tld/index.php

    To chime in on the previous poster:
    Without this feature its very hard to do fine grained access control, thus making any more advanced usage scenarios a pain ( even more, than they usually are already :p )

     
  • Donald Winship

    Donald Winship - 2012-08-02

    Same issue here, and it's a big issue for me because I'm trying to develop an application with many least-privilege database users

    Database server: localhost
    Software: MySQL
    Software version: 5.5.25a - MySQL Community Server (GPL)
    Protocol version: 10
    User: [nothingtoseehere]@localhost
    Server charset: UTF-8 Unicode (utf8)

    Web server
    Apache
    Database client version: libmysql - mysqlnd 5.0.10 - 20111026 - $Id: b0b3b15c693b7f6aeb3aa66b646fee339f175e39 $
    PHP extension: mysqli

    Apache version: Apache/2.2.22
    PHP version: 5.4.45 (apache module)

    phpmyadmin version: 3.5.2

     
  • Anonymous - 2012-10-20

    I was able to fix this problem. Open the /server_privileges.php and go to line 1989. You´ll find this

    .' LIKE \'' . PMA_sqlAddSlashes($dbname, true) . "'";

    change the second function param from true to false.

    .' LIKE \'' . PMA_sqlAddSlashes($dbname, false) . "'";

    The problem, however, is that the PMA_sqlAddSlashes() function does a double escape on backslashes on db names that contains a "_". For example "\\\\_" instead of "\\_".

    It´s a easy fix for the devs I think.

     
  • Anonymous - 2012-10-22
    • assigned_to: nobody --> alexukf
     
  • Anonymous - 2012-10-22
    • priority: 5 --> 7
     
  • Anonymous - 2012-10-22

    Fixed server_privileges.php

     
  • Anonymous - 2012-10-22
    • milestone: 2824804 --> 3.5.3
     
  • Anonymous - 2012-10-22
    • assigned_to: alexukf --> nijel
     
  • Michal Čihař

    Michal Čihař - 2012-10-22
    • assigned_to: nijel --> nobody
     
  • Anonymous - 2012-10-25

    Will this bug be fixed in the next release?

     
  • Anonymous - 2012-10-25
    • assigned_to: nobody --> lem9
     
  • Marc Delisle

    Marc Delisle - 2012-10-25
    • assigned_to: lem9 --> nobody
     
  • Marc Delisle

    Marc Delisle - 2012-10-25

    André,
    please don't assign developers to this bug, we'll do it by ourselves.

     
  • Anonymous - 2012-10-26

    I´m sorry it was my intention to get some attention on my fix below for the next release ;)

     
  • Marc Delisle

    Marc Delisle - 2013-09-17
    • summary: No table permissions displayed --> (ok 4.0.0) No table permissions displayed
    • status: open --> fixed
    • assigned_to: Marc Delisle
    • Priority: 7 --> 1
     
  • Marc Delisle

    Marc Delisle - 2013-09-17

    I can reproduce this bug when the db name has an underscore in its name, with version 3.5.3. However it has been fixed since (no problem in version 4.0.0 and 4.0.6).

     

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks